Sean Parkinson
85a4e34705
Merge pull request #8782 from kojiws/support_aes_cbc_pkcs12_export
...
Support PBE_AES(256|128)_CBC key encryptions on wc_PKCS12_create()
2025-05-22 08:39:11 +10:00
Sean Parkinson
2398a94cf8
Merge pull request #8784 from rlm2002/coverity
...
coverity: init dgst variable test_sha3.c and issues in api.c
2025-05-22 08:34:11 +10:00
Sean Parkinson
005ce08380
Merge pull request #8794 from kareem-wolfssl/multiFixes
...
Add missing DH_MAX_SIZE define for FIPS, correct wolfssl.rc FILETYPE to VFT_DLL
2025-05-22 08:26:24 +10:00
Kareem
08f063d8b3
Correct wolfssl.rc FILETYPE to VFT_DLL. It was previously set to 0x7L which is VFT_STATIC_LIB.
2025-05-21 12:34:09 -07:00
Kareem
4d63d7dedf
Fix missing DH_MAX_SIZE define when building FIPS 140-3 with OpenSSL compatibility layer dh.h.
2025-05-21 12:33:37 -07:00
philljj
be5b62b1a1
Merge pull request #8791 from douzzer/20250521-fix-WC_SIPHASH_NO_ASM
...
20250521-fix-WC_SIPHASH_NO_ASM
2025-05-21 12:23:46 -05:00
Daniel Pouzzner
e2def987d4
wolfcrypt/src/siphash.c: for WC_SIPHASH_NO_ASM, don't define WOLFSSL_NO_ASM if it's already defined.
2025-05-21 10:03:10 -05:00
Ruby Martin
a170624118
coverity: init dgst variable test_sha3.c
...
improper use of neg val api.c
copy-paste error in test_wolfSSL_PEM_read_bio_ECPKParameters
2025-05-21 08:29:44 -06:00
Sean Parkinson
dfe0684bc7
Merge pull request #8789 from douzzer/20250520-WC_SIPHASH_NO_ASM
...
20250520-WC_SIPHASH_NO_ASM
2025-05-21 07:29:53 +10:00
Daniel Pouzzner
a01fb2a61c
wolfcrypt/src/siphash.c: honor WC_SIPHASH_NO_ASM; configure.ac: add -DWC_SIPHASH_NO_ASM when ENABLED_LINUXKM.
2025-05-20 13:03:58 -05:00
Koji Takeda
3666851589
Support PBE_AES256_CBC and PBE_AES128_CBC key encryption on wc_PKCS12_create()
2025-05-19 22:26:46 +09:00
JacobBarthelmeh
05bc7e0d2f
Merge pull request #8783 from douzzer/20250516-remove-implicit-WOLFSSL_DEBUG_CERTIFICATE_LOADS
...
20250516-remove-implicit-WOLFSSL_DEBUG_CERTIFICATE_LOADS
2025-05-16 17:06:18 -06:00
Daniel Pouzzner
3ab16257b0
wolfssl/wolfcrypt/logging.h: don't define WOLFSSL_DEBUG_CERTIFICATE_LOADS just because defined(DEBUG_WOLFSSL).
2025-05-16 16:53:10 -05:00
Daniel Pouzzner
4495da457a
Merge pull request #8778 from rlm2002/ghi8772
...
add NULL reference checks to RSA functions
2025-05-16 16:41:43 -05:00
Ruby Martin
7ae2c24ac4
add NULL reference checks to RSA functions
2025-05-16 14:00:35 -06:00
Daniel Pouzzner
91af9073b0
Merge pull request #8777 from rizlik/dtls_reject_v11
...
Drop DTLS packets with bogus minor version number
2025-05-16 14:45:25 -05:00
Daniel Pouzzner
e67536cb15
Merge pull request #8775 from rlm2002/coverity
...
Coverity: address uninitialized scalar variable issues
2025-05-16 14:44:38 -05:00
Daniel Pouzzner
56b43e5948
Merge pull request #8776 from anhu/no_server_with_opensslall
...
Allow tests to build with opensslall and no server.
2025-05-16 13:28:48 -05:00
Daniel Pouzzner
5abe5df498
Merge pull request #8760 from miyazakh/benchmark_up
...
Guard some benchmark tests by NO_SW_BENCH
2025-05-16 12:42:59 -05:00
Kaleb Himes
25e3a2d34f
Merge pull request #8780 from douzzer/20250515-fips-armasm-fixes
...
20250515-fips-armasm-fixes
2025-05-16 11:12:16 -06:00
David Garske
69ae36a1b6
Merge pull request #8781 from night1rider/zephyr-mlkem-update
...
updating kyber to mlkem arm file for zephyr
2025-05-16 09:21:19 -07:00
Ruby Martin
e998a4c2fc
fix off-by-one error in asn.c
2025-05-16 08:26:19 -06:00
night1rider
229141fd51
updating kyber to mlkem arm file for zephyr
2025-05-15 21:55:36 -06:00
Daniel Pouzzner
77bebff341
fixes for armasm:
...
configure.ac: set DEFAULT_ENABLED_ALL_ASM=no if FIPS <v6 and not on amd64 (i.e. if ARM);
tests/api/test_sha256.c: skip test_wc_Sha256_Flags() and test_wc_Sha224_Flags() if armasm and FIPS <v7;
wolfssl/wolfcrypt/settings.h: define WOLFSSL_SP_INT_DIGIT_ALIGN for ARM (needed on BE, and no effect on LE).
2025-05-15 21:20:10 -05:00
Daniel Pouzzner
8a8a2b5bb1
.github/workflows/smallStackSize.yml: don't install multilib (not needed).
2025-05-15 21:13:50 -05:00
Ruby Martin
2940a16c10
coverity: initialize variables for api.c, test_digest.h, and test_sha3.c
2025-05-15 16:55:34 -06:00
David Garske
081b8397c0
Merge pull request #8779 from douzzer/20250515-smallstack-refactors-and-tests
...
20250515-smallstack-refactors-and-tests
2025-05-15 15:02:58 -07:00
Daniel Pouzzner
401868908a
add .github/workflows/smallStackSize.yml;
...
smallstack refactors in
* wolfcrypt/src/asn.c : wc_GetSubjectPubKeyInfoDerFromCert(),
* wolfcrypt/src/dilithium.c : dilithium_sign_with_seed_mu(),
* wolfcrypt/src/ecc.c : wc_ecc_mulmod_ex2(),
* wolfcrypt/src/wc_mlkem.c : mlkemkey_decapsulate(),
* and wolfcrypt/src/wc_mlkem_poly.c : mlkem_gen_matrix_k*_avx2() and mlkem_get_noise_k2_avx2();
wolfcrypt/test/test.c: in TEST_PASS(), fix STACK_SIZE_CHECKPOINT_WITH_MAX_CHECK to honor TEST_ALWAYS_RUN_TO_END.
2025-05-15 15:28:11 -05:00
David Garske
a1b644202c
Merge pull request #8759 from anhu/index_idx
...
Rename variable index to idx to avoid conflicting declaration.
2025-05-15 11:01:27 -07:00
David Garske
63c3c547b6
Merge pull request #8768 from lealem47/zd19853
...
Add sniffer cleanup API's
2025-05-15 11:01:19 -07:00
David Garske
c13be21a90
Merge pull request #8755 from AlexLanzano/pqc-gcc-error
...
Remove redefinition of MlKemKey and Fix build issue in benchmark
2025-05-15 11:00:40 -07:00
Marco Oliverio
22f41a8dbb
Drop DTLS packets with bogus minor version number
2025-05-15 19:50:36 +02:00
Andrew Hutchings
6790c95e94
Merge pull request #8745 from dgarske/stm32_crypt_header_width
...
Fix edge case issue with STM32 AES GCM auth padding
2025-05-15 16:51:52 +01:00
Anthony Hu
a613fc28d6
Allow tests to build with opensslall and no server.
2025-05-15 11:18:15 -04:00
David Garske
2ac4be3f22
Merge pull request #8773 from douzzer/20250514-linuxkm-and-sp-tweaks
...
20250514-linuxkm-and-sp-tweaks
2025-05-14 19:54:48 -07:00
Daniel Pouzzner
baaab4ccac
Merge pull request #8722 from anhu/undef_def
...
Do not allow define of max to interfere with pthreads
2025-05-14 18:44:57 -05:00
Daniel Pouzzner
c201006a26
wolfcrypt/src/sp_int.c: move setup for -Wno-array-bounds when WOLFSSL_SP_DYN_STACK, to follow sp_int.h include.
2025-05-14 18:20:08 -05:00
Anthony Hu
a814683684
Rename variable index to idx to avoid conflicting declaration.
2025-05-14 18:26:37 -04:00
Daniel Pouzzner
c8b507d246
wolfssl/wolfcrypt/sp_int.h: refactor SP_WORD_SIZEOF as a simple numeric literal, and use them for XALIGNED() for Windows portability.
2025-05-14 16:54:49 -05:00
Daniel Pouzzner
55bbd84445
wolfssl/wolfcrypt/sp_int.h and wolfcrypt/src/sp_int.c: add WOLFSSL_SP_DYN_STACK macro to orthogonalize gnarly setup logic, and refactor to use it throughout; refactor several more sp_int stack-allocated data buffers as sp_int_digit[]s rather than char[]s.
2025-05-14 15:39:37 -05:00
Daniel Pouzzner
f0f4084f94
linuxkm/lkcapi_dh_glue.c: never install DH/FFDHE on kernel <5.18 -- DH secrets have a different format before that version, and FFDHE (CONFIG_CRYPTO_DH_RFC7919_GROUPS) was introduced in 5.18 and is the only FIPS-allowed DH variant.
2025-05-14 15:39:37 -05:00
David Garske
49d9bfa160
Merge pull request #8758 from bigbrett/exportx509pubkey-api
...
Added new ASN X509 API: `wc_GetSubjectPubKeyInfoDerFromCert`
2025-05-14 12:28:45 -07:00
Lealem Amedie
4af0e14e7b
Add ssl_RemoveSession API
2025-05-14 12:09:41 -06:00
Brett Nicholas
40c9a03ebe
rename function args to match implementation
2025-05-14 11:31:36 -06:00
David Garske
6270429089
Fix STM32MP13x STM32 AES GCM.
2025-05-14 10:27:01 -07:00
David Garske
4fd76dae95
Add portability fix for new INT_MAX required on all TLS limit checking (added in 91aad90c59 Jan 24, 2025).
2025-05-14 10:27:01 -07:00
David Garske
7a936d731d
Fix edge case issue with STM32 AES GCM auth padding. Issue introduced in PR #8584 . Fixes ZD 19783
...
Added way to override STM_CRYPT_HEADER_WIDTH.
2025-05-14 10:27:01 -07:00
David Garske
813e36a823
Merge pull request #8770 from douzzer/20250514-WOLFSSL_DEBUG_PRINTF-C89
...
20250514-WOLFSSL_DEBUG_PRINTF-C89
2025-05-14 08:50:46 -07:00
Alex Lanzano
88ae4266cf
Don't define PQC option strings in benchmark if WOLFSSL_BENCHMARK_ALL is defined
...
This fixes the 'defined but not used' build issue in benchmark.c if any PQC algos are enabled
and WOLFSSL_BENCHMARK_ALL is defined.
2025-05-14 08:54:59 -04:00
Daniel Pouzzner
8035667d9b
wolfssl/wolfcrypt/logging.h and wolfcrypt/src/logging.c: add WOLFSSL_DEBUG_PRINTF_FN and WOLFSSL_DEBUG_PRINTF_FIRST_ARGS, and update refactored wolfssl_log(), for C89 compat.
2025-05-14 03:21:28 -05:00